$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft File: MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json) Hash identifier: Xq5Nj6sRXhqFiYpDHTP4dx2N9CLJr2otT1f7EjVcwFg= Subject key identifier: C6:97:3B:3D:30:B8:7D:A3:81:01:4D:D8:66:BC:76:5B:4B:85:6B:25 Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D Certificate issuer: /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft Manifest number: 049F Signing time: Thu 12 Jun 2025 23:33:33 +0000 Manifest this update: Thu 12 Jun 2025 23:33:33 +0000 Manifest next update: Thu 19 Jun 2025 23:33:33 +0000 Files and hashes: 1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: WmNFzfkwcq2GQi+Kz70ZNXsqiS44vw/p0TC4hirQyOg=) 2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: O5o2WM89g2GajktjirO4l7am93YdomSAoRe9/bA2z6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Validity Not Before: Jun 12 23:33:33 2025 GMT Not After : Jun 19 23:33:33 2025 GMT Subject: CN=684b63cd-df17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:3d:7c:fd:0a:18:3d:52:4d:a3:ac:4b:ab: a0:1a:0c:bc:ba:85:5c:e9:54:a4:a8:c7:67:9d:8a: 76:02:d1:55:23:a7:87:e1:bc:7a:20:61:8e:11:5d: eb:88:47:4a:2a:a8:94:be:61:b2:0c:8a:e8:fb:23: 3a:cd:1c:21:05:53:5f:93:1e:0b:7e:43:77:38:f9: c3:f0:20:15:a1:93:96:41:fd:57:47:47:5c:49:d7: 72:1c:31:87:ea:3a:34:95:ea:4c:2a:a8:ce:4e:7c: 97:1b:9f:23:79:ab:1b:c3:4e:db:8e:9b:ae:f4:f6: f8:4c:ee:fd:30:2a:9e:42:9a:e6:9f:58:94:6f:37: 00:fd:a6:95:5b:ae:ec:6b:f3:ad:41:82:6c:08:18: 3b:bc:14:d5:0e:4b:12:15:36:53:a2:fd:5b:b9:af: 09:00:8d:43:91:37:a4:f5:9a:78:23:67:36:e7:ad: 8f:83:f9:0e:75:82:be:5c:54:bf:29:b5:6e:9d:8f: 18:72:04:e1:a4:3a:1a:4d:d1:77:c5:1e:c9:87:fd: fd:93:ca:d4:e1:a2:fe:26:56:f4:9b:82:5e:35:3f: a2:48:9e:6a:75:2d:50:88:32:84:8d:90:3e:67:37: 06:42:4c:de:78:48:f9:40:f4:8f:7b:1a:78:14:06: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:97:3B:3D:30:B8:7D:A3:81:01:4D:D8:66:BC:76:5B:4B:85:6B:25 X509v3 Authority Key Identifier: keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:1f:5a:82:13:a3:77:19:fa:f3:65:ee:62:fd:0f:f3:9c:83: f1:0c:df:b1:df:b2:97:22:67:68:b4:37:66:24:8e:cb:5e:45: 4d:e2:b4:ca:eb:1f:59:52:49:76:4d:7f:e4:c6:47:4b:3b:a4: 90:3a:a9:bd:eb:a0:e9:7b:e5:b1:98:83:aa:cb:34:b8:63:ff: 1d:a7:61:6f:e7:6c:da:fe:e6:93:3f:3d:61:e0:9e:ae:34:36: b9:dd:9c:81:b0:28:74:c1:b6:31:fd:da:6e:2d:b3:91:b9:00: 05:83:c5:f3:6a:52:d1:30:6b:76:55:b6:a6:ba:7d:4e:95:4e: b7:a5:19:b7:47:a0:d5:52:1b:07:88:66:57:90:83:85:4d:43: 67:3a:5b:65:4c:da:36:ff:1d:82:1c:60:22:30:77:a9:59:5e: 40:3b:94:8c:51:49:9f:2e:0a:4f:76:69:42:28:b8:4b:54:4a: 9d:41:02:b9:59:af:3a:f1:a0:0a:39:08:94:bf:de:04:08:30: df:03:9e:b0:98:6e:50:01:be:f8:06:87:95:d1:67:5c:85:c0: 03:55:fe:15:27:b9:a5:a4:2f:a2:3e:13:6c:c2:c7:67:45:98: fb:b8:83:9c:32:1c:e5:0b:bc:7a:e8:4f:28:60:4c:3f:d1:82: 8b:34:f3:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzNzExMTAvBgNVBAUTKDMyRjg5MDBEMzg1NkJFNDNBNzJENkM3RjkzRTkwNEI1 QjgzQ0MzNEQwHhcNMjUwNjEyMjMzMzMzWhcNMjUwNjE5MjMzMzMzWjAYMRYwFAYD VQQDEw02ODRiNjNjZC1kZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhc9fP0KGD1STaOsS6ugGgy8uoVc6VSkqMdnnYp2AtFVI6eH4bx6IGGOEV3r iEdKKqiUvmGyDIro+yM6zRwhBVNfkx4LfkN3OPnD8CAVoZOWQf1XR0dcSddyHDGH 6jo0lepMKqjOTnyXG58jeasbw07bjpuu9Pb4TO79MCqeQprmn1iUbzcA/aaVW67s a/OtQYJsCBg7vBTVDksSFTZTov1bua8JAI1DkTek9Zp4I2c2562Pg/kOdYK+XFS/ KbVunY8YcgThpDoaTdF3xR7Jh/39k8rU4aL+Jlb0m4JeNT+iSJ5qdS1QiDKEjZA+ ZzcGQkzeeEj5QPSPexp4FAaD+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaXOz0w uH2jgQFN2Ga8dltLhWslMB8GA1UdIwQYMBaAFDL4kA04Vr5Dpy1sf5PpBLW4PMNN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTM3MS8zNkZFRTdFQTM4 QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3ZrT25MV3hfay1rRXRiZzh3 MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012aVFEVGhXdmtPbkxXeF9rLWtFdGJnOHcwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTM3MS8zNkZFRTdFQTM4QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3Zr T25MV3hfay1rRXRiZzh3MDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjH1qCE6N3GfrzZe5i/Q/znIPxDN+x37KXImdotDdmJI7LXkVN4rTK 6x9ZUkl2TX/kxkdLO6SQOqm966Dpe+WxmIOqyzS4Y/8dp2Fv52za/uaTPz1h4J6u NDa53ZyBsCh0wbYx/dpuLbORuQAFg8XzalLRMGt2Vbamun1OlU63pRm3R6DVUhsH iGZXkIOFTUNnOltlTNo2/x2CHGAiMHepWV5AO5SMUUmfLgpPdmlCKLhLVEqdQQK5 Wa868aAKOQiUv94ECDDfA56wmG5QAb74BoeV0WdchcADVf4VJ7mlpC+iPhNswsdn RZj7uIOcMhzlC7x66E8oYEw/0YKLNPMa -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:26 2025 by rpki-client